Zyxel ZyWALL USG 20 [2/185] Zywall usg support notes

ZyWALL USG Support Notes

2.2. DEPLOY EPS IN USER AWARE ......................................................................... 60

2.2.1. Application Scenario ............................................................................... 60

2.2.2. Configuration Steps ................................................................................ 60

2.2.3. Scenario Verification ............................................................................... 64

2.3. DEPLOY EPS IN SSL VPN .............................................................................. 66

2.3.1. Application Scenario ............................................................................... 66

2.3.2. Configuration Steps ................................................................................ 67

2.3.3. Scenario Verification ............................................................................... 69

2.4. DEPLOY AAA AND EPS IN SSL VPN .............................................................. 72

2.4.1. Application Scenario ............................................................................... 72

2.4.2. Configuration Steps ................................................................................ 72

2.4.3. Scenario Verification ............................................................................... 89

3. VOIP APPLICATION WITH USG ................................................................... 93

3.1. VOIP SUPPORT DEVICE LIST ........................................................................... 93

3.2. VOIP IN NAT SCENARIO ................................................................................. 94

3.2.1. SIP Server on the Internet ....................................................................... 94

3.2.1.1. Application Scenario ........................................................................ 94

3.2.1.2. Configuration Steps ......................................................................... 95

3.2.2. SIP Server on the Local Network ........................................................... 95

3.2.2.1. Application Scenario ........................................................................ 95

3.2.2.2. Configuration Steps ......................................................................... 96

3.3. VOIP IN VPN SCENARIO ................................................................................. 97

3.3.1. Application Scenario ............................................................................... 97

3.3.2. Configuration Steps ................................................................................ 98

4. IPSEC VPN HIGH AVAILABILITY .............................................................. 109

4.1. SITE-TO-SITE IPSEC VPN HA/FALL BACK ................................................... 109

4.1.1. Application Scenario ............................................................................. 109

4.1.2. Configuration Steps .............................................................................. 110

4.1.3. Scenario Verification ............................................................................. 115

4.2. IPSEC VPN FAIL OVER AND FALL BACK ....................................................... 119

4.2.1. Application Scenario ............................................................................. 119

4.2.2. Configuration Steps .............................................................................. 120

4.2.3. Scenario Verification ............................................................................. 130

FAQ ........................................................................................................................... 135

THE FAQ FROM A TO P ARE ZLD V2.12 RELATED. BUT YOU CAN ALSO REFER TO THEM

FOR ZLD V2.20 CORRESPONDING QUESTIONS. ........................................................ 135

A. DEVICE MANAGEMENT FAQ .............................................................................. 135

A01. How can I connect to ZyWALL USG to perform administrator‟s tasks? .. 135

A02. Why can‟t I login into ZyWALL USG? ..................................................... 135

A03. What‟s difference between “Admin Service Control” and “User Service

Control” configuration in GUI menu System > WWW? .................................... 136

A04. Why ZyWALL USG redirects me to the login page when I am performing